tinc - Nov 2019 - Encryption when forwarding between indirectly-connected hosts

Hi,

If host B is not directly reachable from host A so that tinc packets flow:
	A -> (C) -> B
where C is a 3rd host that both A and B can reach, which public key does 
A use when sending these packets to B? C's public key, or B's public 
key? In other words, are these packets encrypted hop-by-hop, or 
end-to-end? Does it make a difference whether legacy or SPTPS protocol 
is being used?

Thanks,
Frank